Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c0ca458b by Salvatore Bonaccorso at 2022-12-07T23:07:01+01:00
Update information for CVE-2022-37454/python
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -27824,7 +27824,7 @@ CVE-2022-37454 (The Keccak XKCP SHA-3 reference
implementation before fdc6fef ha
- php8.1 8.1.12-1
- php7.4 <removed>
- php7.3 <removed>
- - python3.10 <unfixed> (unimportant)
+ - python3.10 3.10.9-1 (unimportant)
- python3.9 <unfixed> (unimportant)
- python3.7 <removed>
- pysha3 <removed> (bug #1023030)
@@ -27838,10 +27838,10 @@ CVE-2022-37454 (The Keccak XKCP SHA-3 reference
implementation before fdc6fef ha
NOTE: For PHP, introduced in:
https://github.com/php/php-src/commit/91663a92d1697fc30a7ba4687d73e0f63ec2baa1
(php-7.2.0alpha1)
NOTE: Fixed by:
https://github.com/php/php-src/commit/248f647724e385bfb8d83aa5b5a5ca3c4ee2c7fd
(php-8.2.0RC5)
NOTE: https://github.com/python/cpython/issues/98517
- NOTE:
https://github.com/python/cpython/commit/0e4e058602d93b88256ff90bbef501ba20be9dd3
(3.10-branch)
- NOTE:
https://github.com/python/cpython/commit/857efee6d2d43c5c12fc7e377ce437144c728ab8
(3.9-branch)
- NOTE:
https://github.com/python/cpython/commit/948c6794711458fd148a3fa62296cadeeb2ed631
(3.8-branch)
- NOTE:
https://github.com/python/cpython/commit/8088c90044ba04cd5624b278340ebf934dbee4a5
(3.7-branch)
+ NOTE:
https://github.com/python/cpython/commit/0e4e058602d93b88256ff90bbef501ba20be9dd3
(v3.10.9)
+ NOTE:
https://github.com/python/cpython/commit/857efee6d2d43c5c12fc7e377ce437144c728ab8
(v3.9.16)
+ NOTE:
https://github.com/python/cpython/commit/948c6794711458fd148a3fa62296cadeeb2ed631
(v3.8.16)
+ NOTE:
https://github.com/python/cpython/commit/8088c90044ba04cd5624b278340ebf934dbee4a5
(v3.7.16)
NOTE: For Python, introduced in:
https://github.com/python/cpython/commit/6fe2a75b645044ca2b5dac03e8d850567b547a9a
(3.6)
NOTE: Versions which have the OpenSSL sha3 delegation are not affected
by the issue and only ship
NOTE: source-wise the bundled _sha3 XKCP module code.
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c0ca458b22ede8dfb4d8e2d0ba290b2ad89a0ab1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c0ca458b22ede8dfb4d8e2d0ba290b2ad89a0ab1
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
